last executing test programs: 3.854262349s ago: executing program 0 (id=685): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) 3.686979096s ago: executing program 0 (id=688): r0 = epoll_create1(0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1, 0x0, 0x0) 2.379007084s ago: executing program 2 (id=701): r0 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x1) 1.593972369s ago: executing program 2 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x4004) 1.483516217s ago: executing program 2 (id=709): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 1.109672223s ago: executing program 3 (id=712): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x40, 0x700, 0x4, 0x2, {{0xc, 0x4, 0x1, 0xa, 0x30, 0x66, 0x0, 0x7, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x1c, 0x35, 0x1, 0x1, [{@multicast1, 0x5}, {@private=0xa010101, 0x3}, {@broadcast, 0x1}]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.020005848s ago: executing program 1 (id=713): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 934.189992ms ago: executing program 3 (id=714): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef", 0xc0}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 860.845897ms ago: executing program 1 (id=715): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000040)=0x2, 0x4) 715.677581ms ago: executing program 1 (id=716): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) 665.27645ms ago: executing program 3 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x24, r1, 0x101, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x4, 0x1}]}]}, 0x24}}, 0x0) 583.190275ms ago: executing program 1 (id=718): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 565.375191ms ago: executing program 0 (id=719): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x6) 497.986118ms ago: executing program 2 (id=720): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400add427ab62201745b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003fffffffffffffffff7ffffe7ee000000deff0000000200000000", 0x58}], 0x1) 455.899275ms ago: executing program 3 (id=721): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x2a, 0x2101, 0x0, 0x0) 396.659755ms ago: executing program 0 (id=722): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004b00)=""/191, 0xbf}, {&(0x7f0000000580)=""/4072, 0xfe8}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 327.039548ms ago: executing program 2 (id=723): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x3, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x6a, 0x8, 0x5, 0x3}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x5, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x5, 0xf, 0x9, 0xfffffff9}}]}) 287.211418ms ago: executing program 3 (id=724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000140)=@arm64_sve={0x608000000015020f, 0x0}) 286.240671ms ago: executing program 1 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 193.420376ms ago: executing program 0 (id=726): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r1}, 0x14) bind$packet(r0, &(0x7f0000000040)={0x11, 0x8, r1, 0x1, 0x6, 0x6, @remote}, 0x14) 98.310351ms ago: executing program 2 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1}]}) 98.161054ms ago: executing program 1 (id=728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000097, 0x0, 0x7ff}]}) 1.573399ms ago: executing program 0 (id=729): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 0s ago: executing program 3 (id=730): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x8, 0x0, {0x9, 0x1}, {0x47, 0x2}, @cond=[{0x100, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x11, 0x1, 0x10, 0x5, 0xfaa}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000540)=""/240) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 80.735728][ T5821] cgroup: Unknown subsys name 'net' [ 80.865116][ T5821] cgroup: Unknown subsys name 'cpuset' [ 80.874822][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.617735][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.827141][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.836421][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.845075][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.851558][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.860366][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.861166][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.868596][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.875801][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.882552][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.890777][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.899255][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.910324][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.921087][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.930294][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.944392][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.954958][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.963174][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.972902][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.981206][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.006636][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.575841][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.615083][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 85.704796][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 85.748979][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 85.860712][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.869208][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.877421][ T5832] bridge_slave_0: entered allmulticast mode [ 85.885208][ T5832] bridge_slave_0: entered promiscuous mode [ 85.935295][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.942683][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.950268][ T5832] bridge_slave_1: entered allmulticast mode [ 85.958070][ T5832] bridge_slave_1: entered promiscuous mode [ 85.989413][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.998067][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.005675][ T5835] bridge_slave_0: entered allmulticast mode [ 86.013228][ T5835] bridge_slave_0: entered promiscuous mode [ 86.049167][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.056503][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.064098][ T5835] bridge_slave_1: entered allmulticast mode [ 86.072058][ T5835] bridge_slave_1: entered promiscuous mode [ 86.082845][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.122792][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.143685][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.151082][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.158671][ T5833] bridge_slave_0: entered allmulticast mode [ 86.165968][ T5833] bridge_slave_0: entered promiscuous mode [ 86.174793][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.182056][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.189217][ T5833] bridge_slave_1: entered allmulticast mode [ 86.196780][ T5833] bridge_slave_1: entered promiscuous mode [ 86.252266][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.275197][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.282532][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.289848][ T5834] bridge_slave_0: entered allmulticast mode [ 86.297437][ T5834] bridge_slave_0: entered promiscuous mode [ 86.318479][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.330112][ T5832] team0: Port device team_slave_0 added [ 86.339327][ T5832] team0: Port device team_slave_1 added [ 86.345586][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.353077][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.360392][ T5834] bridge_slave_1: entered allmulticast mode [ 86.367972][ T5834] bridge_slave_1: entered promiscuous mode [ 86.377916][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.438650][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.472402][ T5835] team0: Port device team_slave_0 added [ 86.505190][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.512509][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.539166][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.553716][ T5835] team0: Port device team_slave_1 added [ 86.572966][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.584376][ T5833] team0: Port device team_slave_0 added [ 86.590961][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.597975][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.624102][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.649320][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.660948][ T5833] team0: Port device team_slave_1 added [ 86.677261][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.684432][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.711135][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.754100][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.761454][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.790368][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.862513][ T5834] team0: Port device team_slave_0 added [ 86.869262][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.876657][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.902984][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.915454][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.922564][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.948535][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.952489][ T5155] Bluetooth: hci0: command tx timeout [ 86.982233][ T5832] hsr_slave_0: entered promiscuous mode [ 86.989109][ T5832] hsr_slave_1: entered promiscuous mode [ 86.998571][ T5834] team0: Port device team_slave_1 added [ 87.031794][ T5155] Bluetooth: hci1: command tx timeout [ 87.031810][ T5842] Bluetooth: hci3: command tx timeout [ 87.032207][ T5844] Bluetooth: hci2: command tx timeout [ 87.074951][ T5835] hsr_slave_0: entered promiscuous mode [ 87.082961][ T5835] hsr_slave_1: entered promiscuous mode [ 87.089639][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 87.095967][ T5835] Cannot create hsr debugfs directory [ 87.142375][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.149364][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.177055][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.243615][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.250626][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.278065][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.298929][ T5833] hsr_slave_0: entered promiscuous mode [ 87.306569][ T5833] hsr_slave_1: entered promiscuous mode [ 87.313516][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 87.319467][ T5833] Cannot create hsr debugfs directory [ 87.516909][ T5834] hsr_slave_0: entered promiscuous mode [ 87.523742][ T5834] hsr_slave_1: entered promiscuous mode [ 87.529954][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 87.535995][ T5834] Cannot create hsr debugfs directory [ 87.914076][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.927277][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.944652][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.979578][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.071855][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.083211][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.096697][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.127673][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.229627][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.246295][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.289549][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.324543][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.397869][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.420541][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.434227][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.447388][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.524190][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.599790][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.634063][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.667471][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.674942][ T4559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.696293][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.706614][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.713965][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.743930][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.751522][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.760822][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.768141][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.792222][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.876529][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.895147][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.913320][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.920541][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.976826][ T4484] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.984522][ T4484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.010616][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.032088][ T5844] Bluetooth: hci0: command tx timeout [ 89.057162][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.065249][ T4559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.102481][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.109992][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.116050][ T5844] Bluetooth: hci2: command tx timeout [ 89.124556][ T5155] Bluetooth: hci1: command tx timeout [ 89.124574][ T5842] Bluetooth: hci3: command tx timeout [ 89.418734][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.583837][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.598513][ T5832] veth0_vlan: entered promiscuous mode [ 89.639740][ T5832] veth1_vlan: entered promiscuous mode [ 89.762001][ T5835] veth0_vlan: entered promiscuous mode [ 89.790106][ T5832] veth0_macvtap: entered promiscuous mode [ 89.800393][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.809073][ T5835] veth1_vlan: entered promiscuous mode [ 89.823105][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.847268][ T5832] veth1_macvtap: entered promiscuous mode [ 89.904914][ T5835] veth0_macvtap: entered promiscuous mode [ 89.927518][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.940657][ T5835] veth1_macvtap: entered promiscuous mode [ 89.958860][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.992746][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.011792][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.022710][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.046502][ T1149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.055810][ T1149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.066865][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.117538][ T5833] veth0_vlan: entered promiscuous mode [ 90.124246][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.133727][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.144781][ T5834] veth0_vlan: entered promiscuous mode [ 90.166335][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.176928][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.215106][ T5834] veth1_vlan: entered promiscuous mode [ 90.231777][ T5833] veth1_vlan: entered promiscuous mode [ 90.291173][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.300888][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.364081][ T5834] veth0_macvtap: entered promiscuous mode [ 90.389061][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.405321][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.424602][ T5834] veth1_macvtap: entered promiscuous mode [ 90.466741][ T5833] veth0_macvtap: entered promiscuous mode [ 90.484865][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.509273][ T5833] veth1_macvtap: entered promiscuous mode [ 90.516774][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.524906][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.540740][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.570866][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.684069][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.684908][ T4559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.697165][ T4484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.709323][ T4559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.713366][ T4484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.736191][ T4484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.750480][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.768582][ T4484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.819605][ T4559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.844098][ T4559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.867749][ T4559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.886067][ T4559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.097713][ T4484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.115787][ T5155] Bluetooth: hci0: command tx timeout [ 91.142019][ T4484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.193059][ T5155] Bluetooth: hci1: command tx timeout [ 91.198521][ T5155] Bluetooth: hci2: command tx timeout [ 91.205310][ T5844] Bluetooth: hci3: command tx timeout [ 91.260949][ T4559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.273532][ T4559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.274488][ T4484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.323691][ T4484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.324338][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.448487][ T4559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.472126][ T4559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.541443][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 91.580154][ T5836] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 91.635282][ T5836] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 91.649295][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.672103][ T5836] usb 1-1: Product: syz [ 91.676337][ T5836] usb 1-1: Manufacturer: syz [ 91.704703][ T5836] usb 1-1: SerialNumber: syz [ 91.753272][ T5836] usb 1-1: config 0 descriptor?? [ 91.800898][ T5836] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 91.823851][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.987151][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.023117][ T24] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 92.053775][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 92.068822][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.078486][ T24] usb 3-1: Product: syz [ 92.083189][ T24] usb 3-1: Manufacturer: syz [ 92.087918][ T24] usb 3-1: SerialNumber: syz [ 92.177984][ T9] cfg80211: failed to load regulatory.db [ 92.386410][ T5836] gspca_zc3xx: reg_w_i err -71 [ 92.622385][ T5973] capability: warning: `syz.1.20' uses deprecated v2 capabilities in a way that may be insecure [ 92.962647][ T24] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 92.994045][ T24] usb 3-1: device reset changed ep0 maxpacket size! [ 93.009829][ T5836] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 93.021560][ T5836] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 93.026772][ T24] usb 3-1: USB disconnect, device number 2 [ 93.049281][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.064966][ T5836] usb 1-1: USB disconnect, device number 2 [ 93.192121][ T5155] Bluetooth: hci0: command tx timeout [ 93.211454][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.273146][ T5155] Bluetooth: hci1: command tx timeout [ 93.278615][ T5155] Bluetooth: hci2: command tx timeout [ 93.284392][ T5844] Bluetooth: hci3: command tx timeout [ 93.371935][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 93.380988][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.398866][ T24] usb 3-1: config 0 has no interfaces? [ 93.411984][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.423134][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.439128][ T24] usb 3-1: Product: syz [ 93.443713][ T24] usb 3-1: Manufacturer: syz [ 93.448437][ T24] usb 3-1: SerialNumber: syz [ 93.464575][ T24] usb 3-1: config 0 descriptor?? [ 93.741682][ T5886] usb 3-1: USB disconnect, device number 3 [ 93.777914][ T5998] Cache volume key already in use (9p,(null),) [ 94.065589][ T6007] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.653771][ T6027] ======================================================= [ 94.653771][ T6027] WARNING: The mand mount option has been deprecated and [ 94.653771][ T6027] and is ignored by this kernel. Remove the mand [ 94.653771][ T6027] option from the mount to silence this warning. [ 94.653771][ T6027] ======================================================= [ 94.710231][ T6027] option changes via remount are deprecated (pid=6026 comm=syz.2.44) [ 94.741965][ T6027] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 "" [ 94.890765][ T6036] binder: 6034:6036 ioctl c0306201 200000000cc0 returned -14 [ 95.214831][ T6045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.53'. [ 95.251548][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 95.821597][ T5836] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.991070][ T6075] input: syz0 as /devices/virtual/input/input5 [ 96.004288][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 96.029759][ T5836] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.061516][ T5836] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.091467][ T5836] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.111706][ T5836] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 96.121151][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.144699][ T5836] usb 1-1: config 0 descriptor?? [ 96.281848][ T6084] netlink: 'syz.1.72': attribute type 22 has an invalid length. [ 96.290281][ T6084] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.72'. [ 96.575340][ T5836] ntrig 0003:1B96:0004.0001: unknown main item tag 0x0 [ 96.598480][ T5836] ntrig 0003:1B96:0004.0001: unknown main item tag 0x0 [ 96.619643][ T5836] ntrig 0003:1B96:0004.0001: unknown main item tag 0x0 [ 96.626912][ T5836] ntrig 0003:1B96:0004.0001: unknown main item tag 0x0 [ 96.638368][ T5836] ntrig 0003:1B96:0004.0001: unknown main item tag 0x0 [ 96.666974][ T5836] ntrig 0003:1B96:0004.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 96.706116][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'. [ 96.723071][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'. [ 96.739857][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.765829][ T5836] ntrig 0003:1B96:0004.0001: Firmware version: 2.15.3.18.7 (7c24 577a) [ 97.000736][ T5836] usb 1-1: USB disconnect, device number 3 [ 97.314856][ T6118] netlink: 'syz.1.88': attribute type 83 has an invalid length. [ 97.980498][ T6145] sctp: [Deprecated]: syz.2.99 (pid 6145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.980498][ T6145] Use struct sctp_sack_info instead [ 98.208473][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 98.221461][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 98.230885][ T6156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.106'. [ 98.450285][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'. [ 98.477899][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'. [ 98.887285][ T6180] netdevsim netdevsim3: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 99.573046][ T5836] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.741505][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 99.748988][ T5836] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 99.759116][ T5836] usb 2-1: config 1 has no interface number 0 [ 99.770487][ T5836] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 99.798070][ T5836] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 99.811940][ T5836] usb 2-1: config 1 interface 105 has no altsetting 0 [ 99.825958][ T5836] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 99.842875][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.851171][ T5836] usb 2-1: Product: syz [ 99.856301][ T5836] usb 2-1: Manufacturer: syz [ 99.861006][ T5836] usb 2-1: SerialNumber: syz [ 99.895113][ T6196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.906994][ T6196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.331195][ T6196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.339253][ T6196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.756934][ T5836] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 100.771139][ T5836] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 100.793048][ T5844] Bluetooth: hci4: command 0x1003 tx timeout [ 100.799808][ T5155] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 100.808471][ T5836] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 100.921244][ T5836] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ca:f6:ed:44:b7:5b [ 100.974020][ T5836] usb 2-1: USB disconnect, device number 2 [ 101.012469][ T5836] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 101.152266][ T5836] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 101.183765][ T5836] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 101.201635][ T5836] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 101.321891][ T6253] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 101.654252][ T6263] input: syz0 as /devices/virtual/input/input6 [ 101.940492][ T6276] __nla_validate_parse: 3 callbacks suppressed [ 101.940514][ T6276] netlink: 104 bytes leftover after parsing attributes in process `syz.1.165'. [ 101.983917][ T6272] IPVS: persistence engine module ip_vs_pe_ not found [ 102.164231][ T6284] overlayfs: workdir and upperdir must reside under the same mount [ 102.500590][ T6293] netlink: 104 bytes leftover after parsing attributes in process `syz.0.172'. [ 102.726292][ T6301] Bluetooth: MGMT ver 1.23 [ 103.556183][ T6329] can0: slcan on ttyS3. [ 103.646232][ T6330] can0 (unregistered): slcan off ttyS3. [ 103.869947][ T6340] syz.1.192 uses obsolete (PF_INET,SOCK_PACKET) [ 104.462248][ T6361] capability: warning: `syz.2.198' uses 32-bit capabilities (legacy support in use) [ 105.241477][ T927] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.424268][ T927] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 105.444612][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.485080][ T927] usb 2-1: Product: syz [ 105.492154][ T927] usb 2-1: Manufacturer: syz [ 105.496816][ T927] usb 2-1: SerialNumber: syz [ 105.542570][ T927] usb 2-1: config 0 descriptor?? [ 105.553959][ T927] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 105.555317][ T5887] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 105.821132][ T5887] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 105.853518][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.872111][ T5887] usb 3-1: Product: syz [ 105.879403][ T5887] usb 3-1: Manufacturer: syz [ 105.885796][ T5887] usb 3-1: SerialNumber: syz [ 105.920761][ T5887] usb 3-1: config 0 descriptor?? [ 106.131638][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.296065][ T5887] usb 3-1: USB disconnect, device number 4 [ 106.311907][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 106.343379][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 106.366305][ T927] gspca_sunplus: reg_r err -71 [ 106.375675][ T24] usb 4-1: config 0 has no interface number 0 [ 106.384656][ T927] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 106.403097][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 106.423364][ T927] usb 2-1: USB disconnect, device number 3 [ 106.429282][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.439977][ T24] usb 4-1: Product: syz [ 106.458198][ T24] usb 4-1: Manufacturer: syz [ 106.473484][ T24] usb 4-1: SerialNumber: syz [ 106.497339][ T24] usb 4-1: config 0 descriptor?? [ 106.519534][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 106.745314][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 106.789256][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 107.150512][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 107.152982][ T5887] usb 4-1: USB disconnect, device number 2 [ 107.196925][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 107.247310][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 107.278939][ T5887] quatech2 4-1:0.51: device disconnected [ 107.611668][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.651968][ T927] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.785736][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 107.801700][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.833518][ T927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.845364][ T24] usb 2-1: config 0 descriptor?? [ 107.852125][ T927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.862347][ T927] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 107.871608][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.895078][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 107.922978][ T927] usb 1-1: config 0 descriptor?? [ 108.114524][ T24] gspca_spca508: reg_read err -32 [ 108.124030][ T24] gspca_spca508: reg_read err -32 [ 108.310221][ T6451] input: syz0 as /devices/virtual/input/input7 [ 108.333513][ T24] gspca_spca508: reg_read err -71 [ 108.346735][ T24] gspca_spca508: reg_read err -71 [ 108.367622][ T927] logitech 0003:046D:C298.0002: item fetching failed at offset 5/7 [ 108.381217][ T24] gspca_spca508: reg write: error -71 [ 108.392643][ T24] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 108.402404][ T927] logitech 0003:046D:C298.0002: parse failed [ 108.408636][ T927] logitech 0003:046D:C298.0002: probe with driver logitech failed with error -22 [ 108.415953][ T6453] netlink: 400 bytes leftover after parsing attributes in process `syz.2.234'. [ 108.433416][ T24] usb 2-1: USB disconnect, device number 4 [ 108.580390][ T5887] usb 1-1: USB disconnect, device number 4 [ 108.860360][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 109.282855][ T6476] loop2: detected capacity change from 0 to 7 [ 109.312510][ T6476] Dev loop2: unable to read RDB block 7 [ 109.318256][ T6476] loop2: unable to read partition table [ 109.349597][ T6476] loop2: partition table beyond EOD, truncated [ 109.382438][ T6476] loop_reread_partitions: partition scan of loop2 (賫x ) failed (rc=-5) [ 109.641274][ T6489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.908149][ T6500] process 'syz.2.256' launched './file0' with NULL argv: empty string added [ 110.031813][ T6504] netlink: 'syz.0.258': attribute type 16 has an invalid length. [ 110.049938][ T6504] netlink: 'syz.0.258': attribute type 2 has an invalid length. [ 110.081468][ T6504] netlink: 'syz.0.258': attribute type 2 has an invalid length. [ 110.113968][ T6504] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.258'. [ 111.446466][ T6557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.699403][ T6567] netlink: 830 bytes leftover after parsing attributes in process `syz.0.289'. [ 111.746026][ T6567] netlink: 830 bytes leftover after parsing attributes in process `syz.0.289'. [ 111.785600][ T6567] Zero length message leads to an empty skb [ 112.079686][ T6577] input: syz0 as /devices/virtual/input/input9 [ 112.090843][ T6580] virtiofs: Unknown parameter 'always 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 18 nlmon0 : 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 20 batadv0 : 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 21 vxcan0 : 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 22 vxcan1 : 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 23 veth0 : 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 24 veth1 : 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 25 wg0 : 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 26 wg1 : 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 27 wg2 : 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 28 veth0_to_bridge: 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 29 bridge_slave_0: 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 30 veth1_to_bridge: 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 31 bridge_slave_1: 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 32 veth0_to_bond: 1 V3 [ 112.090843][ T6580] 010000E0 1 0:00000000 0 [ 112.090843][ T6580] 33 bond_slave_0: 1 V3 [ 112.090843][ T6580] 010000E0 1 0:0 [ 112.949761][ T6605] loop9: detected capacity change from 0 to 7 [ 113.147723][ T6605] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.177916][ T6605] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.189135][ T6605] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.224400][ T6605] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.264044][ T6605] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.279025][ T6605] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.290641][ T6605] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.312286][ T6605] ldm_validate_partition_table(): Disk read failed. [ 113.319190][ T6605] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.368143][ T6605] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.401545][ T6605] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.419120][ T6605] Dev loop9: unable to read RDB block 0 [ 113.430845][ T6605] loop9: unable to read partition table [ 113.444393][ T6605] loop9: partition table beyond EOD, truncated [ 113.450814][ T6605] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 113.450814][ T6605] ) failed (rc=-5) [ 114.996442][ T6659] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.743732][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.346'. [ 116.141838][ T29] audit: type=1326 audit(1769511493.226:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30439aeb9 code=0x7ffc0000 [ 116.226573][ T29] audit: type=1326 audit(1769511493.246:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30439aeb9 code=0x7ffc0000 [ 116.280038][ T29] audit: type=1326 audit(1769511493.256:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe30439aeb9 code=0x7ffc0000 [ 116.346833][ T29] audit: type=1326 audit(1769511493.286:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe30439ac22 code=0x7ffc0000 [ 116.440746][ T29] audit: type=1326 audit(1769511493.286:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe30439ac22 code=0x7ffc0000 [ 116.508615][ T29] audit: type=1326 audit(1769511493.286:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30439aeb9 code=0x7ffc0000 [ 116.610422][ T29] audit: type=1326 audit(1769511493.296:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30439aeb9 code=0x7ffc0000 [ 116.647131][ T29] audit: type=1326 audit(1769511493.296:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe30435b78e code=0x7ffc0000 [ 116.681738][ T29] audit: type=1326 audit(1769511493.296:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30439aeb9 code=0x7ffc0000 [ 116.727282][ T29] audit: type=1326 audit(1769511493.296:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe30439aeb9 code=0x7ffc0000 [ 116.831691][ T5836] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.013079][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 117.028917][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.059528][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.083314][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.118643][ T5836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.153180][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.164193][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.202341][ T6738] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 117.249644][ T6738] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 117.371185][ T6740] netlink: 'syz.3.371': attribute type 21 has an invalid length. [ 117.380415][ T6740] netlink: 156 bytes leftover after parsing attributes in process `syz.3.371'. [ 117.394434][ T6740] netlink: 'syz.3.371': attribute type 21 has an invalid length. [ 117.400326][ T5836] usb 1-1: GET_CAPABILITIES returned 0 [ 117.402581][ T6740] netlink: 156 bytes leftover after parsing attributes in process `syz.3.371'. [ 117.418853][ T5836] usbtmc 1-1:16.0: can't read capabilities [ 117.648516][ T5836] usb 1-1: USB disconnect, device number 5 [ 117.788333][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.973593][ T5887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.989703][ T5887] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.012657][ T5887] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.015933][ T6758] team0: No ports can be present during mode change [ 118.032245][ T5887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 118.045080][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 118.054627][ T5887] usb 3-1: Product: syz [ 118.059390][ T5887] usb 3-1: Manufacturer: syz [ 118.064427][ T5887] usb 3-1: SerialNumber: syz [ 118.297766][ T5887] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 118.531881][ T5887] usb 3-1: USB disconnect, device number 5 [ 118.559757][ T5887] usblp0: removed [ 119.445238][ T6802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.927392][ T6815] blkio.reset_stats is deprecated [ 120.869293][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 121.021761][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.194367][ T5920] usb 1-1: config 0 has an invalid interface number: 229 but max is 0 [ 121.213861][ T5920] usb 1-1: config 0 has no interface number 0 [ 121.229249][ T5920] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 121.258948][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.293131][ T5920] usb 1-1: config 0 descriptor?? [ 121.535276][ T5920] usb 1-1: USB disconnect, device number 6 [ 122.281468][ T5920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.296359][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 122.309365][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 122.421158][ T6896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.435923][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 122.443695][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.455788][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.473354][ T5920] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.488116][ T6898] batadv_slave_1: entered promiscuous mode [ 122.501483][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.514598][ T6897] batadv_slave_1: left promiscuous mode [ 122.522865][ T5920] usb 2-1: Product: syz [ 122.530832][ T5920] usb 2-1: Manufacturer: syz [ 122.541530][ T5920] usb 2-1: SerialNumber: syz [ 122.796067][ T5920] usb 2-1: 0:2 : does not exist [ 122.818514][ T5920] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 122.924474][ T5920] usb 2-1: USB disconnect, device number 5 [ 123.013843][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.161429][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.321419][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 123.333475][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.344656][ T24] usb 4-1: config 0 has no interfaces? [ 123.350264][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 123.372906][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.397855][ T24] usb 4-1: config 0 descriptor?? [ 123.551792][ T87] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.663936][ T5836] usb 4-1: USB disconnect, device number 3 [ 123.710041][ T6938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.722939][ T87] usb 3-1: Using ep0 maxpacket: 16 [ 123.738831][ T87] usb 3-1: config 0 has no interfaces? [ 123.749867][ T87] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 123.765858][ T87] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.796581][ T87] usb 3-1: config 0 descriptor?? [ 124.075921][ T927] usb 3-1: USB disconnect, device number 6 [ 124.082681][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 125.128391][ T6977] mmap: syz.3.472 (6977) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.208972][ T7012] dvmrp1: entered allmulticast mode [ 126.229675][ T7012] dvmrp1: left allmulticast mode [ 126.500752][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 126.500771][ T29] audit: type=1326 audit(1769511503.616:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe30439aeb9 code=0x0 [ 126.506413][ T7028] netlink: 88 bytes leftover after parsing attributes in process `syz.2.499'. [ 126.561689][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 127.001979][ T7039] netlink: 116 bytes leftover after parsing attributes in process `syz.3.505'. [ 127.012523][ T7039] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 128.157723][ T7081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.524'. [ 128.350277][ T7089] netlink: 56 bytes leftover after parsing attributes in process `syz.0.528'. [ 129.587477][ T7140] : entered promiscuous mode [ 129.623696][ T7142] warning: `syz.3.554' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.483397][ T7179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.572'. [ 130.519775][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.572'. [ 130.531612][ T5836] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.712943][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 130.726798][ T7189] input: syz1 as /devices/virtual/input/input11 [ 130.744192][ T5836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.774660][ T5836] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 130.784641][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.810184][ T5836] usb 3-1: Product: syz [ 130.821118][ T5836] usb 3-1: Manufacturer: syz [ 130.832994][ T5836] usb 3-1: SerialNumber: syz [ 130.854396][ T5836] usb 3-1: config 0 descriptor?? [ 131.039603][ T7202] netlink: 64 bytes leftover after parsing attributes in process `syz.1.583'. [ 131.273512][ T5836] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 131.281990][ T87] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 131.442875][ T87] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.455696][ T87] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.470353][ T87] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 131.486213][ T87] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.495823][ T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.520133][ T87] usb 4-1: Product: syz [ 131.525113][ T87] usb 4-1: Manufacturer: syz [ 131.529858][ T87] usb 4-1: SerialNumber: syz [ 131.540291][ T7201] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 131.556254][ T87] cdc_mbim 4-1:1.0: skipping garbage [ 131.685060][ T5836] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 131.697028][ T5836] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 131.711896][ T5836] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 131.742816][ T5836] usb 3-1: USB disconnect, device number 7 [ 131.990936][ T7221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.378200][ T87] cdc_mbim 4-1:1.0: bind() failure [ 132.409160][ T87] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 132.421234][ T87] cdc_ncm 4-1:1.1: bind() failure [ 132.490229][ T87] usb 4-1: USB disconnect, device number 4 [ 133.119278][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.126910][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.201583][ T87] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.364237][ T87] usb 2-1: Using ep0 maxpacket: 16 [ 133.388976][ T87] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.420481][ T87] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.455656][ T87] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 133.495689][ T87] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 133.526776][ T87] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.557184][ T87] usb 2-1: config 0 descriptor?? [ 133.802081][ T7274] kernel read not supported for file /file1 (pid: 7274 comm: syz.2.612) [ 133.839179][ T29] audit: type=1800 audit(1769511510.946:16): pid=7274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.612" name="file1" dev="mqueue" ino=17073 res=0 errno=0 [ 133.864708][ T7279] binder: 7276:7279 ioctl 400c620e 0 returned -14 [ 134.024206][ T87] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 134.192441][ T7248] random: crng reseeded on system resumption [ 134.194915][ T87] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 134.241879][ T87] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 134.375868][ T5887] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 134.411619][ T87] usb 2-1: USB disconnect, device number 6 [ 134.446612][ T5887] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 134.479879][ T5887] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 134.554857][ T5887] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 134.895570][ T5887] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.083328][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.099932][ T7319] binder: 7318:7319 ioctl c018620c 200000000340 returned -1 [ 135.110450][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.138374][ T5887] usb 3-1: config 1 has no interface number 0 [ 135.153339][ T5887] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.188912][ T5887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.198616][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 135.241368][ T5887] usb 3-1: Product: syz [ 135.255496][ T5887] usb 3-1: SerialNumber: syz [ 135.313717][ T5887] cdc_ncm 3-1:1.1: skipping garbage [ 135.328648][ T5887] usb 3-1: selecting invalid altsetting 1 [ 135.928740][ T5887] cdc_ncm 3-1:1.1: SET_CRC_MODE failed [ 135.955281][ T5887] cdc_ncm 3-1:1.1: SET_NTB_FORMAT failed [ 135.992564][ T5887] usb 3-1: selecting invalid altsetting 1 [ 135.999386][ T5887] cdc_ncm 3-1:1.1: bind() failure [ 136.029895][ T5887] usb 3-1: USB disconnect, device number 8 [ 136.624696][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 137.277499][ T7380] loop5: detected capacity change from 0 to 7 [ 137.289538][ T7380] Dev loop5: unable to read RDB block 7 [ 137.301468][ T7380] loop5: AHDI p1 p2 [ 137.305535][ T7380] loop5: partition table partially beyond EOD, truncated [ 137.321648][ T7380] loop5: p1 start 1702000233 is beyond EOD, truncated [ 137.491570][ T5886] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.491609][ T7382] binder: 7381:7382 ioctl 40046205 0 returned -22 [ 137.665571][ T5886] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.701416][ T5886] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.743224][ T5886] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 137.768045][ T5886] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 137.788584][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.826348][ T7378] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.012916][ T7397] Attempt to restore checkpoint with obsolete wellknown handles [ 138.951524][ T5886] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 138.962204][ T5886] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input13 [ 139.051251][ T5886] usb 1-1: USB disconnect, device number 7 [ 139.057256][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 139.843584][ T5920] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 140.060126][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.081732][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.101410][ T5920] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.110686][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.163274][ T5920] usb 4-1: config 0 descriptor?? [ 140.181970][ T5920] hub 4-1:0.0: USB hub found [ 140.387915][ T5920] hub 4-1:0.0: 1 port detected [ 141.434607][ T5920] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 141.451478][ T5920] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 141.470307][ T5920] usbhid 4-1:0.0: can't add hid device: -32 [ 141.487734][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 141.549675][ T5920] usb 4-1: USB disconnect, device number 5 [ 142.550992][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 144.223270][ T7549] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 144.235574][ T7549] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 144.244003][ T7549] CPU: 1 UID: 0 PID: 7549 Comm: syz.3.730 Not tainted syzkaller #0 PREEMPT(full) [ 144.253295][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 144.263444][ T7549] RIP: 0010:__queue_work+0xa2/0xf90 [ 144.268760][ T7549] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 144.288577][ T7549] RSP: 0018:ffffc9000472f418 EFLAGS: 00010002 [ 144.294652][ T7549] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 144.302802][ T7549] RDX: ffffc9000c565000 RSI: 00000000000001fd RDI: 00000000000001fe [ 144.310881][ T7549] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 144.318948][ T7549] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 144.326928][ T7549] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 144.335091][ T7549] FS: 00007f69fe46c6c0(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 144.344291][ T7549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.350892][ T7549] CR2: 000000110c2e1fa1 CR3: 000000002887a000 CR4: 00000000003526f0 [ 144.358977][ T7549] Call Trace: [ 144.362268][ T7549] [ 144.365209][ T7549] ? __asan_memcpy+0x40/0x70 [ 144.369812][ T7549] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 144.376060][ T7549] queue_work_on+0x106/0x1d0 [ 144.380762][ T7549] puts_queue+0xa3/0xe0 [ 144.384931][ T7549] ? __pfx_puts_queue+0x10/0x10 [ 144.389884][ T7549] k_fn+0x7c/0xd0 [ 144.393521][ T7549] k_pad+0x79a/0xa90 [ 144.397416][ T7549] ? lock_acquire+0x106/0x330 [ 144.402183][ T7549] ? atomic_notifier_call_chain+0x26/0x180 [ 144.407997][ T7549] ? __pfx_k_pad+0x10/0x10 [ 144.412413][ T7549] ? atomic_notifier_call_chain+0x26/0x180 [ 144.418252][ T7549] ? atomic_notifier_call_chain+0x26/0x180 [ 144.424067][ T7549] kbd_event+0x2ec1/0x40d0 [ 144.428493][ T7549] ? kernel_fpu_end+0x4f/0x80 [ 144.433318][ T7549] ? blake2s_compress+0x1e17/0x1eb0 [ 144.438531][ T7549] ? __pfx_kbd_event+0x10/0x10 [ 144.443296][ T7549] ? add_lock_to_list+0xc7/0x100 [ 144.448245][ T7549] ? __lock_acquire+0x6b5/0x2cf0 [ 144.453212][ T7549] ? __pfx_blake2s_compress+0x10/0x10 [ 144.458588][ T7549] ? __lock_acquire+0x6b5/0x2cf0 [ 144.463530][ T7549] ? __lock_acquire+0x6b5/0x2cf0 [ 144.468483][ T7549] ? __lock_acquire+0x6b5/0x2cf0 [ 144.473428][ T7549] ? input_pass_values+0x8d/0x890 [ 144.478462][ T7549] ? lock_acquire+0x106/0x330 [ 144.483145][ T7549] ? input_pass_values+0x8d/0x890 [ 144.488261][ T7549] input_handle_events_default+0xd4/0x1a0 [ 144.493988][ T7549] ? input_pass_values+0x8d/0x890 [ 144.499014][ T7549] input_pass_values+0x288/0x890 [ 144.503954][ T7549] ? input_handle_event+0x70c/0xf30 [ 144.509159][ T7549] input_event_dispose+0x330/0x6b0 [ 144.514288][ T7549] input_inject_event+0x1dd/0x340 [ 144.519319][ T7549] ? input_inject_event+0xb6/0x340 [ 144.524528][ T7549] evdev_write+0x325/0x4c0 [ 144.528958][ T7549] ? __lock_acquire+0x6b5/0x2cf0 [ 144.533945][ T7549] ? __pfx_evdev_write+0x10/0x10 [ 144.539063][ T7549] ? bpf_lsm_file_permission+0x9/0x20 [ 144.544437][ T7549] ? security_file_permission+0x75/0x260 [ 144.550091][ T7549] ? rw_verify_area+0x255/0x4d0 [ 144.554950][ T7549] ? __pfx_evdev_write+0x10/0x10 [ 144.559892][ T7549] vfs_write+0x29a/0xb90 [ 144.564149][ T7549] ? __pfx_vfs_write+0x10/0x10 [ 144.568935][ T7549] ? __fget_files+0x2a/0x420 [ 144.573533][ T7549] ? __fget_files+0x2a/0x420 [ 144.578127][ T7549] ? __fget_files+0x3a0/0x420 [ 144.582810][ T7549] ? __fget_files+0x2a/0x420 [ 144.587408][ T7549] ksys_write+0x150/0x270 [ 144.591752][ T7549] ? __pfx_ksys_write+0x10/0x10 [ 144.596616][ T7549] do_syscall_64+0xe2/0xf80 [ 144.601125][ T7549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.607195][ T7549] ? trace_irq_disable+0x37/0x100 [ 144.612229][ T7549] ? clear_bhb_loop+0x40/0x90 [ 144.616996][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.622902][ T7549] RIP: 0033:0x7f69fd59aeb9 [ 144.627322][ T7549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.647107][ T7549] RSP: 002b:00007f69fe46c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.655531][ T7549] RAX: ffffffffffffffda RBX: 00007f69fd815fa0 RCX: 00007f69fd59aeb9 [ 144.663510][ T7549] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 144.671494][ T7549] RBP: 00007f69fd608c1f R08: 0000000000000000 R09: 0000000000000000 [ 144.679488][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.687475][ T7549] R13: 00007f69fd816038 R14: 00007f69fd815fa0 R15: 00007ffc14b83ad8 [ 144.695551][ T7549] [ 144.698571][ T7549] Modules linked in: [ 144.702572][ T7549] ---[ end trace 0000000000000000 ]--- [ 144.708054][ T7549] RIP: 0010:__queue_work+0xa2/0xf90 [ 144.713273][ T7549] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 144.732886][ T7549] RSP: 0018:ffffc9000472f418 EFLAGS: 00010002 [ 144.739066][ T7549] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 144.747160][ T7549] RDX: ffffc9000c565000 RSI: 00000000000001fd RDI: 00000000000001fe [ 144.755142][ T7549] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 144.763324][ T7549] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 144.771414][ T7549] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 144.779508][ T7549] FS: 00007f69fe46c6c0(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 144.788453][ T7549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.795042][ T7549] CR2: 000000110c2e1fa1 CR3: 000000002887a000 CR4: 00000000003526f0 [ 144.803025][ T7549] Kernel panic - not syncing: Fatal exception [ 144.809632][ T7549] Kernel Offset: disabled [ 144.813974][ T7549] Rebooting in 86400 seconds..